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IN THE SPECIFICATION 

At page 4, line 3, amend the paragraph that starts there as follows: 

Another method for handling communication connection in a security gateway is 
to process data packets on the fly, packet-by-packet. This method is not very 
suitable for handling TCP connections, but it is used for TCP as well. Figure 3- IB 
illustrates a client C connected to a server S via a security gateway 1 10 handling 
the data packets of the connection between the client C and the server S on a 
packet-by-packet basis. There is one connection 114 going from the client to the 
server. In the security gateway 110, there is an agent 112, which takes care of 
monitoring and modifying the data stream of one packet 1 16 at a time. Typically, 
this agent 1 12 is a specific software code portion, which captures a packet 116, 
monitors if the data stream therein contains anything that should be modified, 
modifies the data if necessary and then releases the packet. 

At page 15, line 14, amend the paragraph that starts there as follows: 

Figure 5C illustrates as an example a flowchart of a still other method for 
accepting a delayed data packet for processing. The method is applicable for 
handling data packets containing information fragments belong to a sequence of 
information fragments or for handling data packets belonging to a set of data 
packets having at least partly hierarchical structure. In step 41 9 A a first delayed 
data packet is accepted for processing. This may refer for example to the first 
delayed data packet, which was accepted for processing in the flowchart of 
Figure 5B. In step 420 J _said first delayed data packet and a second delayed data 
packet are compared. The terms first and second delayed data packet refer in 
general to some delayed data packets. The comparison may be done either 
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implicitly or explicitly. If it is detected, that the first delayed data packet contains 
the information fragment immediately preceding the information fragments of said 
second delayed data packet in said sequence of information fragments or that the 
first delayed data packet precedes said second delayed data packet in said at 
least partly hierarchical structure, the second delayed data packet is accepted for 
processing in step 444-422. Also in this case it is possible to accept several 
delayed data packets at the same time, if the structure of the set of data packets 
allows it. 

Please amend the abstract as follows. 
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